基于IDA技术的Honeynet日志挖掘研究

Research of Log Mining Based on the IDA in Honeynet Network

在构建Honeynet原型系统和安全可靠的远程日志服务器的基础上,对远程日志服务器上的日志数据进行分析和挖掘。将对Honeynet日志挖掘分析架构进行设计,实现对日志数据的预处理,并通过IDA对预处理的日志数据进行挖掘。最后对挖掘结果进行分析,达到有效防止网络攻击的目的。

A prototype system is build dues to analyze and miniing the intrusion attack with the help of longrange server logs. It creates Honeynet architection mode in the Unix/Linux systems and Pretreatment Honeynet logs. Then remining the log datas by the IDA methods, and therefore creat a secure defense internet network.